Hi all,
We are running Windows Server 2003, with IIS 6.0.

We are getting the following error in the Application log:

*************************
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1011
Date: 11/19/2004
Time: 4:52:26 PM
User: N/A
Computer: MAINFRAME
Description:
A process serving application pool 'DefaultAppPool' suffered a fatal
communication error with the World Wide Web Publishing Service. The process
id was '3148'. The data field contains the error number.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Data:
***********************
0000: 6d 00 07 80 m..Â?

We installed IIState and got the following log when it recently
crashed once again.

*****************************
***********************
Starting new log output
IISState version 3.3.1

Fri Nov 19 14:38:33 2004

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 3344

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed:




Thread ID: 29
System Thread ID: dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
00 0a7bff78 0a761fe8 0xa734612
01 0a7bffb8 77e4a990 0xa761fe8
02 0a7bffec 00000000 kernel32!BaseThreadStart+0x34
Closing open log file C:\iisstate\output\IISState-3344.log
Opened log file 'C:\iisstate\output\IISState-3344.log'

***********************
Starting new log output
IISState version 3.3.1

Fri Nov 19 14:38:53 2004

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 3344

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 2e4
Kernel Time: 0:0:0.80
User Time: 0:0:0.140
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4
01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf
04 0006feec 5a364d7d w3dt!WP_CONTEXT::RunMainThreadLoop+0xe
05 0006fef4 5a3a1d98 w3dt!UlAtqStartListen+0x2d
06 0006ff00 5a3a5d54 w3core!W3_SERVER::StartListen+0x8e
07 0006ff0c 010017af w3core!UlW3Start+0xea
08 0006ff44 0100195e w3wp!wmain+0x236
09 0006ffc0 77e4f38c w3wp!wmainCRTStartup+0x12f
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: a74
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
succeeded
Loaded Son of Strike data table version 5 from
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
Thread 1
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0097ff54 77f430c7 SharedUserData!SystemCallStub+0x4
01 0097ff58 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 0097ff84 792e9b2f kernel32!GetQueuedCompletionStatus+0x27
03 0097ffb8 77e4a990 mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 0097ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: c64
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009bff9c 77f4262b SharedUserData!SystemCallStub+0x4
01 009bffa0 77f6b5b2 ntdll!NtDelayExecution+0xc
02 009bffb8 77e4a990 ntdll!RtlpTimerThread+0x45
03 009bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: c40
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009fff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 009fff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 009fffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 009fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: c3c
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00a6fe20 77f4313f SharedUserData!SystemCallStub+0x4
01 00a6fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
02 00a6ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
03 00a6ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
04 00a6ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
05 00a6ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
06 00a6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: b30
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 016eff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 016eff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 016effb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 016effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 3b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c6ff28 77f430c7 SharedUserData!SystemCallStub+0x4
01 00c6ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 00c6ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
03 00c6ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
04 00c6ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
05 00c6ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
06 00c6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: 394
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00caff28 77f430c7 SharedUserData!SystemCallStub+0x4
01 00caff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 00caff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
03 00caff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
04 00caffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
05 00caffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
06 00caffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: a98
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ceff28 77f430c7 SharedUserData!SystemCallStub+0x4
01 00ceff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 00ceff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
03 00ceff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
04 00ceffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
05 00ceffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
06 00ceffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 668
Kernel Time: 0:0:0.170
User Time: 0:0:0.60
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d2ff28 77f430c7 SharedUserData!SystemCallStub+0x4
01 00d2ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 00d2ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
03 00d2ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
04 00d2ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
05 00d2ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
06 00d2ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: e28
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00defcec 77f4372d SharedUserData!SystemCallStub+0x4
01 00defcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
02 00deffb8 77e4a990 ntdll!RtlpWaitThread+0x158
03 00deffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: ac0
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 016aff14 77f43741 SharedUserData!SystemCallStub+0x4
01 016aff18 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 016aff88 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 016aff98 5a3a51f7 kernel32!WaitForSingleObject+0xf
04 016affb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85
05 016affc4 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: b34
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a02ff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a02ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a02ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a02ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: b70
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 13
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 017aff54 77f430c7 SharedUserData!SystemCallStub+0x4
01 017aff58 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 017aff84 792e9b2f kernel32!GetQueuedCompletionStatus+0x27
03 017affb8 77e4a990 mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 017affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: ab8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 14
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 017efee4 77f4262b SharedUserData!SystemCallStub+0x4
01 017efee8 77e418ea ntdll!NtDelayExecution+0xc
02 017eff50 77e416ee kernel32!SleepEx+0x68
03 017eff5c 792e9ebe kernel32!Sleep+0xb
04 017effb8 77e4a990 mscorwks!ThreadpoolMgr::GateThreadStart+0x54
05 017effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 808
Kernel Time: 0:0:1.231
User Time: 0:0:8.11
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 15
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 0182ff10 77f43741 SharedUserData!SystemCallStub+0x4
01 0182ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0182ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0182ff94 792e91e0 kernel32!WaitForSingleObject+0xf
04 0182ffb8 77e4a990 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 0182ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: 39c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 16
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0191fe74 77f4372d SharedUserData!SystemCallStub+0x4
01 0191fe78 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0191ff20 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 0191ff38 791d25d5 kernel32!WaitForMultipleObjects+0x17
04 0191ffa0 791d254c mscorwks!DebuggerRCThread::MainLoop+0x90
05 0191ffb0 791d4d50 mscorwks!DebuggerRCThread::ThreadProc+0x68
06 0191ffb8 77e4a990 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb
07 0191ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 8b8
Kernel Time: 0:0:0.130
User Time: 0:0:0.20
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 17
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 019ffe90 77f4372d SharedUserData!SystemCallStub+0x4
01 019ffe94 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 019fff3c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 019fff54 79262a5f kernel32!WaitForMultipleObjects+0x17
04 019fff74 791bbea4 mscorwks!WaitForFinalizerEvent+0x5a
05 019fffb8 77e4a990 mscorwks!GCHeap::FinalizerThreadStart+0x96
06 019fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: c1c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a29ff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a29ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a29ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a29ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: c74
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 19
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01dbff38 77f4262b SharedUserData!SystemCallStub+0x4
01 01dbff3c 77e418ea ntdll!NtDelayExecution+0xc
02 01dbffa4 792ea483 kernel32!SleepEx+0x68
03 01dbffb8 77e4a990 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30
04 01dbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 97c
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0928ff14 77f43741 SharedUserData!SystemCallStub+0x4
01 0928ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0928ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0928ff98 70a05c99 kernel32!WaitForSingleObject+0xf
04 0928ffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19
05 0928ffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa
06 0928ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: ee0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0934fe1c 77f4372d SharedUserData!SystemCallStub+0x4
01 0934fe20 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0934fec8 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 0934ff24 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 0934ff40 70a183cc USER32!MsgWaitForMultipleObjects+0x1d
05 0934ff80 77bbb9c3 asp!CMTACallbackThread::Thread+0x4c
06 0934ff8c 00000000 msvcrt!free+0xc8




Thread ID: 22
System Thread ID: 2bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0938fefc 77f43741 SharedUserData!SystemCallStub+0x4
01 0938ff00 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0938ff70 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0938ff80 709f4800 kernel32!WaitForSingleObject+0xf
04 0938ffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65




Thread ID: 23
System Thread ID: cb8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 093ffef0 77f43741 SharedUserData!SystemCallStub+0x4
01 093ffef4 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 093fff64 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 093fff74 75630e16 kernel32!WaitForSingleObject+0xf
04 093fff84 77bc91ed comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+0x25
05 093fffb8 77e4a990 msvcrt!_endthreadex+0x95
06 093fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 24
System Thread ID: 9e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0943fee8 77f43741 SharedUserData!SystemCallStub+0x4
01 0943feec 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0943ff5c 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0943ff6c 756308f3 kernel32!WaitForSingleObject+0xf
04 0943ff84 77bc91ed comsvcs!CSTAThreadPool::KillThreadControlLoop+0x21
05 0943ffb8 77e4a990 msvcrt!_endthreadex+0x95
06 0943ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 25
System Thread ID: 968
Kernel Time: 0:0:0.280
User Time: 0:0:0.580
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0947fdcc 77f4372d SharedUserData!SystemCallStub+0x4
01 0947fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0947fe78 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 0947fed4 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 0947fef0 756342a4 USER32!MsgWaitForMultipleObjects+0x1d
05 0947ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
06 0947ffb8 77e4a990 msvcrt!_endthreadex+0x95
07 0947ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 26
System Thread ID: f88
Kernel Time: 0:0:0.20
User Time: 0:0:0.70
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 094bfdcc 77f4372d SharedUserData!SystemCallStub+0x4
01 094bfdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 094bfe78 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 094bfed4 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 094bfef0 756342a4 USER32!MsgWaitForMultipleObjects+0x1d
05 094bff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
06 094bffb8 77e4a990 msvcrt!_endthreadex+0x95
07 094bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 27
System Thread ID: 99c
Kernel Time: 0:0:0.10
User Time: 0:0:0.30
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 094ffdcc 77f4372d SharedUserData!SystemCallStub+0x4
01 094ffdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 094ffe78 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 094ffed4 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 094ffef0 756342a4 USER32!MsgWaitForMultipleObjects+0x1d
05 094fff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
06 094fffb8 77e4a990 msvcrt!_endthreadex+0x95
07 094fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 28
System Thread ID: 7d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0953fdcc 77f4372d SharedUserData!SystemCallStub+0x4
01 0953fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0953fe78 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 0953fed4 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 0953fef0 756342a4 USER32!MsgWaitForMultipleObjects+0x1d
05 0953ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
06 0953ffb8 77e4a990 msvcrt!_endthreadex+0x95
07 0953ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 29
System Thread ID: dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
00 0a7bff78 0a761fe8 0xa734612
01 0a7bffb8 77e4a990 0xa761fe8
02 0a7bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 30
System Thread ID: dc4
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 0a95ff10 77f43741 SharedUserData!SystemCallStub+0x4
01 0a95ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0a95ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0a95ff94 0a7f38a9 kernel32!WaitForSingleObject+0xf
04 0a95ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54
05 0a95ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 31
System Thread ID: d5c
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 0a99ff08 77f43741 SharedUserData!SystemCallStub+0x4
01 0a99ff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0a99ff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0a99ff8c 0a7f38b9 kernel32!WaitForSingleObject+0xf
04 0a99ffb8 77e4a990 oledb32!ResetResourceThread+0x84
05 0a99ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 32
System Thread ID: d7c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0a9dfd04 77f43741 SharedUserData!SystemCallStub+0x4
01 0a9dfd08 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0a9dfd78 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0a9dfd88 7561065c kernel32!WaitForSingleObject+0xf
04 0a9dffb8 77e4a990 comsvcs!PingThread+0xea
05 0a9dffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 33
System Thread ID: c08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a2dff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a2dff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a2dffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a2dffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 34
System Thread ID: c88
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a31ff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a31ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a31ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a31ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 35
System Thread ID: b64
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a35ff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a35ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a35ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a35ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 36
System Thread ID: abc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a39ff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a39ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a39ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a39ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 37
System Thread ID: abc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0a39ff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 0a39ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 0a39ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 0a39ffec 00000000 kernel32!BaseThreadStart+0x34

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\3344-1100900411.dmp - mini user dump

*****

Closing open log file C:\iisstate\output\IISState-3344.log
********************************************************

Any help would be greatly appreciated.

Tim Petru
LANDesk Inc.
801-208-1690
tim.petru@landesk.com

Re: PLease anaylze IISstate.log by Pat

Pat
Mon Nov 22 12:08:29 CST 2004

The crash is caused by the thread stack becoming corrupted. The most likely
reason is that a DLL is unloading out from under IIS. If you open the .dmp
file with WinDBG and type:

~29s <enter>
kb <enter>

It may tell you which .dll it was.


Pat

"TPetru" <TPetru@discussions.microsoft.com> wrote in message
news:5991A7D8-8DF6-4E7A-89DD-3F888D5192FD@microsoft.com...
>
> Hi all,
> We are running Windows Server 2003, with IIS 6.0.
>
> We are getting the following error in the Application log:
>
> *************************
> Event Type: Warning
> Event Source: W3SVC
> Event Category: None
> Event ID: 1011
> Date: 11/19/2004
> Time: 4:52:26 PM
> User: N/A
> Computer: MAINFRAME
> Description:
> A process serving application pool 'DefaultAppPool' suffered a fatal
> communication error with the World Wide Web Publishing Service. The
> process
> id was '3148'. The data field contains the error number.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> Data:
> ***********************
> 0000: 6d 00 07 80 m..?
>
> We installed IIState and got the following log when it recently
> crashed once again.
>
> *****************************
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Nov 19 14:38:33 2004
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 3344
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
> IIS has crashed...
> Beginning Analysis
> DLL (!FunctionName) that failed:
>
>
>
>
> Thread ID: 29
> System Thread ID: dc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 00 0a7bff78 0a761fe8 0xa734612
> 01 0a7bffb8 77e4a990 0xa761fe8
> 02 0a7bffec 00000000 kernel32!BaseThreadStart+0x34
> Closing open log file C:\iisstate\output\IISState-3344.log
> Opened log file 'C:\iisstate\output\IISState-3344.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Nov 19 14:38:53 2004
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 3344
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 2e4
> Kernel Time: 0:0:0.80
> User Time: 0:0:0.140
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4
> 01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf
> 04 0006feec 5a364d7d w3dt!WP_CONTEXT::RunMainThreadLoop+0xe
> 05 0006fef4 5a3a1d98 w3dt!UlAtqStartListen+0x2d
> 06 0006ff00 5a3a5d54 w3core!W3_SERVER::StartListen+0x8e
> 07 0006ff0c 010017af w3core!UlW3Start+0xea
> 08 0006ff44 0100195e w3wp!wmain+0x236
> 09 0006ffc0 77e4f38c w3wp!wmainCRTStartup+0x12f
> 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
>
>
>
>
> Thread ID: 1
> System Thread ID: a74
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> succeeded
> Loaded Son of Strike data table version 5 from
> "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
> Thread 1
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 0097ff54 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 0097ff58 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 0097ff84 792e9b2f kernel32!GetQueuedCompletionStatus+0x27
> 03 0097ffb8 77e4a990
> mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
> 04 0097ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 2
> System Thread ID: c64
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009bff9c 77f4262b SharedUserData!SystemCallStub+0x4
> 01 009bffa0 77f6b5b2 ntdll!NtDelayExecution+0xc
> 02 009bffb8 77e4a990 ntdll!RtlpTimerThread+0x45
> 03 009bffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 3
> System Thread ID: c40
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009fff70 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 009fff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
> 02 009fffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
> 03 009fffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 4
> System Thread ID: c3c
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00a6fe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 00a6fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 00a6ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 00a6ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 00a6ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 00a6ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 00a6ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 5
> System Thread ID: b30
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 016eff70 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 016eff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
> 02 016effb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
> 03 016effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 6
> System Thread ID: 3b0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00c6ff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00c6ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00c6ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00c6ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00c6ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00c6ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00c6ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 7
> System Thread ID: 394
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00caff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00caff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00caff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00caff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00caffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00caffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00caffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 8
> System Thread ID: a98
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00ceff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00ceff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00ceff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00ceff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00ceffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00ceffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00ceffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 9
> System Thread ID: 668
> Kernel Time: 0:0:0.170
> User Time: 0:0:0.60
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d2ff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00d2ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00d2ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00d2ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00d2ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00d2ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00d2ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 10
> System Thread ID: e28
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00defcec 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00defcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
> 02 00deffb8 77e4a990 ntdll!RtlpWaitThread+0x158
> 03 00deffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 11
> System Thread ID: ac0
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 016aff14 77f43741 SharedUserData!SystemCallStub+0x4
> 01 016aff18 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 016aff88 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 016aff98 5a3a51f7 kernel32!WaitForSingleObject+0xf
> 04 016affb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85
> 05 016affc4 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 12
> System Thread ID: b34
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0a02ff70 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 0a02ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
> 02 0a02ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
> 03 0a02ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 13